Solving the Challenges of Record Security with Record Center

As we look back at the typical challenges of Records Management, be it the ability to implement a non-invasive content ingress and approval processes, ensuring that the entire record lifecycle is properly managed—inclusive of disposition, or ensuring that users are able to find the content they need to do their jobs in as few clicks as possible, there’s one remaining pain point that has the potential to bring your entire records management strategy to its knees… security. The structure of your records management solution drives security, but security also often drives structure, so what comes first? Thankfully, Record Center solves these problems for you and stores your records in a structure designed to support your specific security needs.

Storage vs. Security Models

When first configuring a new Record Center instance, you’re asked to select both a Storage Model and a Security Model. These two options work in concert with one another to tell Record Center at what granularity you want to secure your records, and to ensure that they are stored using a structure that supports and enables that security methodology. These options are also impacted by other configuration settings of Record Center, such as your approval model—since determining who can approve records and at what point in their record lifecycle also contains an element of record security. Fundamentally, Record Center presents these options all in a way that is more intuitive than having to manually design what an overall repository architecture looks like—one of the challenges that B&R’s Managing Director, Mike Oryszak brushed on as part of his previous Keys to Designing and Managing Large Repositories blog post.

RecordApprovals1.png

Options for Record Security

Record Center offers three separate security models that may be configured to meet your organization’s individual needs. These record security models apply after a record has been loaded into the system and processed through any necessary approvals, so it’s important to note that the selection of a specific security model does not require a user to be a consumer of record content in order to participate in the upload/ingress of content, or to perform one or more of the record’s approval stages

Entity

The entity security model provides the least granularity for record security. This is often a good fit for small teams where the number of users consuming record content is low, the organization’s corporate structure is thin, or security doesn’t need to vary between individual record types. Every record added to Record Center is assigned to a legal entity, such as B&R Business Solutions, LLC. For organizations that only have one legal entity, this field will default to a single value, but from a security perspective this effectively means that all of that entity’s records are available to the same audience, be it every employee or a smaller subset such as a compliance team. This model is also particularly useful if an organization contains many different legal entities. This is often the case in the real estate industry where different properties are often separate legal entities. Using this model, records are easily classified and secured by the entity they belong to, simplifying the ability to grant users or owners of each entity access to only that entity’s records.

The entity security model is a good fit for small teams or where security doesn’t need to vary between individual record types

Series

The series security model ensures that each individual record series created within Record Center can be individually secured. This allows you to provide granular access to specific categories of records, including all of the document types that belong to that specific series. As an example, providing a user access to a “Service Contracts” series, would give them access to all service contracts document types, which might include things like equipment leases, maintenance contracts, master service agreements, etc.

Record Center’s Metadata-based security model allows for a more dynamic implementation of record security.

Metadata

Record Center’s Metadata-based security model allows for a more dynamic implementation of record security. When using this model, an organization defines one or more record metadata field(s) that can be used to determine that record’s security. As an example, if a record type has a “Business Unit” field, and the goal is to secure records based on if they were part of the Manufacturing business unit or Corporate business unit, metadata-based security would allow an organization to define users that will have access to any record where Business Unit is set to Manufacturing. This security is applied regardless of legal entity or record series, meaning that multiple metadata-based security fields may exist on any record type. Ultimately, this allows you to define the previous Business Unit based audiences in addition to say “Office Location”, where one or more users would be granted access to all records based on a specific Office Location value.

Record Center’s Metadata-based security model allows for a more dynamic implementation of record security.

Compliance Access

In addition to the previously mentioned security models, Record Center also facilitates simple access for those users that need access to every record, such as a corporate compliance department. These users may be given access to Record Center’s “Global Record Access” group, which is applied to every record that is loaded into the system.

Conclusion

Our goal with Record Center has always been to try and simplify the otherwise daunting and complex task of designing and implementing a robust Records Management solution, be it the initial installation of a solution, designing the overall implementation, identifying an organization’s various record types, defining individual retention plans for each of those types, and ensuring that the right people can find the content they need when they need it. While Record Center’s ability to manage record security in a way that’s easy to understand is just one component of that strategy, it is vital to reducing accidental exposure, and ensuring that sensitive records are locked down to only those users that have been identified as consumers of that content.

About Record Center

Record Center is your turnkey solution for enterprise-class record management. An extension of Microsoft SharePoint, Record Center arms your users and record managers with a feature-packed, intuitive solution to manage the entire life-cycle of your records. Configure, Approve and Search for records faster and easier than ever with Record Center.

calltoaction-recordcenter.jpg

Interested in learning more about Record Center?

Overcoming Upload & Approval Challenges with Records Management

When we first embarked on the journey of creating Record Center, we knew there were several major pain points in the lifecycle of records management that we wanted to address. Creating a platform that would ease the burden on record managers and record approvers was one of our top priorities, and the challenges of content ingress and record approval were some of the main issues we wanted to address. 

To understand the pain of loading and approving content into a records management solution is to realize that content comes from a seemingly endless number of sources. Those sources could include other business systems or raw scans of physical documents, and could comprise any type of document an organization handles—contracts, invoices, employment agreements, non-disclosure agreements, tax documents, etc. Each of those unique document types could very well contain different metadata, different required fields, or different document formats further complicating the notion of a centralized ingress and approval process. 

Upload Content (Ingress) 

Record Center’s model of “Document Types” allows for an organization to define criteria for each type of record to be loaded into the system. Each of these document types contains its own distinct metadata requirements, approval requirements, retention plans, and disposition processes. This model allows for all records—regardless of their type—to be submitted to the same central Pending Records library, using the same process, while still ensuring that a unified record submission and approval flow may be used. 

Required Fields 

Critical to being able to easily and accurately find records is the notion of applying metadata to records. Record Center’s unique in-line preview mode allows a user submitting a record to easily see their document alongside the document’s required and optional metadata fields. This view allows them to quickly determine what fields must be completed for a given document type, and if necessary, navigate through the document in question to determine the values of those required fields. 

Approval Models 

Document Approvers and Record Managers are frequently faced with the challenge of having to approve large quantities of records. To cope with these challenges, Record Center offers several features integral to streamlining this otherwise time-consuming process. 

Unique Document Type Approvers

Each unique document type may contain its own distinct record approvers, allowing for a first stage approval by a user belonging to that document’s work center or area of expertise. This process helps to ensure that misclassified records or those with incorrect metadata are caught before entering the Record Manager’s approval queue. 

Inline Document Preview

Utilizing inline preview, a document approver and/or Record Manager can easily review a document alongside its metadata to ensure the metadata entered is accurate, and all required fields have been completed. 

Approve and View Next

As a document approver or Record Manager moves through their approval queue, they would historically have to open the document to be approved, approve that document, close it, open the next document, approve that, close it, and so on. To streamline this click-heavy process, Record Center contains a “Approve and View Next” feature, which allows the user to review, approve and open the next document in their queue with a single click. 

Bulk Approval

In the case of a bulk import where a record’s data has already been validated, Record Center includes a bulk approval option that allows a document approver or Record Manager to select multiple records at once and approve them all with a single click. 

Auto Approval

In some cases, an organization may wish to automatically approve records. The likely scenario for this is when a records management team is small, and perhaps the same people would do the content ingress as well as the approval. In this scenario, records can be configured to automatically approve after they’ve been pending approval for a set amount of time. 

 

About Record Center 

Record Center is your turnkey solution for enterprise-class record management. An extension of Microsoft SharePoint, Record Center arms your users and record managers with a feature-packed, intuitive solution to manage the entire life-cycle of your records. Configure, Approve and Search for records faster and easier than ever with Record Center. 

 
calltoaction-recordcenter.jpg

Interested in learning more about Record Center?

Finding Records with Record Center

Record Center offers users three distinct methods for finding records—each ensuring the security and integrity of the record by only showing a user those records they have been granted access to view. Users tend to mature through these three methods as they gain more understanding of the system and the structure or records within their organization.

 
icon-rc-folders-01.png

Traditional Folder-Like Browsing

“Browse Records” allows a user to navigate through the virtual hierarchy of records defined within the system. This method feels at home to those users that have historically worked in file shares or similar environments, or those that are new to the organization and may want to “explore” to better understand the record hierarchy.

 

Basic Keyword Searching

As a user learns more about the types of records stored within the system, record hierarchies, and metadata associated with given document types, they typically migrate away from browsing and begin to adopt search as the mechanism to find records. Record Center’s generic keyword searching allows you to perform simple keyword searches, or even create your own search queries to find the content you’re looking for.

A simple keyword search for “Lease” as an example, would return any record the user has access to that contains the word “Lease” in any of the record metadata, or in the content of the record itself (provided the record has gone through an OCR/indexing process). When performing a basic keyword search, a user will typically get a larger and less targeted result set. This result set can then be further refined using standardized metadata refiners—allowing the user to incrementally reduce that result set and hone in on their targeted records.

 

Structured Searching with Record Finder

Record Finder allows a user to conduct a structured search and identify a very targeted set of records based on specific criteria. This is the most efficient way for a user to find a record, provided they know at least some of the record’s metadata. Perhaps a user knows that they’re looking for a lease that was associated with a specific business unit, specific office, and affiliated with a specific legal entity. Record Finder allows a user to plug in all known metadata and issue a search for any matching records stored within Record Center. In addition, Record Finder can be configured to support different, allowing different users access to different searching scenarios with differing search fields. Furthermore, the targeted result set returned by Record Finder is may still be refined further using the standardized metadata refiners also available through the basic keyword searching.

 

About Record Center

Record Center is your turnkey solution for enterprise-class record management. An extension of Microsoft SharePoint, Record Center arms your users and record managers with a feature-packed, intuitive solution to manage the entire life-cycle of your records. Configure, Approve and Search for records faster and easier than ever with Record Center.

 

Interested in learning more about Record Center?

Why We Created Record Center

From time to time when I’m talking to prospective customer about Record Center, I get the question “What made you decide to build this?” It’s a great question, and the answer stems from a conversation I had with the CIO of one of our customers back in 2011. For this particular customer, we had recently implemented SharePoint Server 2010 and were in the process of migrating their Microsoft Office SharePoint Server 2007 sites and content up to 2010, while also planning for a variety of new SharePoint-based applications. When we looked across the portfolio of applications that we were going to build along with all of the other non-SharePoint-based systems they were maintaining, one thing became apparent – their records management story was non-existent. Across the organization, there were at least (that we were aware of) 11 different systems/locations that records could be stored in, and fewer than half of those had an identified business owner. To make matters worse, there was zero consistency in naming conventions, metadata, and classification schemas between the systems. It became immediately apparent that something had to be done because this was a mess from every perspective – but what exactly we were going to do was not so apparent.

You would have thought that with B&R being a SharePoint solutions provider, we would have immediately recommended SharePoint as the answer. But back in those days (and even still today), SharePoint was not known for being a great records management solution. Sure, there are site columns, managed metadata, content types, information management policies, retention policies, records declaration, and the content organizer (to name some of the features). But trying to explain how to configure and properly utilize all of these features to a site owner or business user tasked with records management for their department or group was close to impossible. The features were all over the place – library settings, site settings, site collection settings – and required various levels of access that most organizations did not want to grant. Simply put, SharePoint did not offer the end-to-end records management solution that was intuitive and easy to use; with this in mind we initially looked at alternative solutions.

brick-wall-construction.jpg

The features were all over the place and required various levels of access...

As an alternative to SharePoint, we looked at a variety of options including Documentum, FileNet, and other large systems, but the sticker shock we got when we saw not only the licensing but implementation costs (and timelines) always brought us back to SharePoint.

And that’s when Record Center was truly envisioned. When looking at the other systems, we saw the types of features and functionality they had – and we knew most of that was available in SharePoint, but was buried and difficult to implement out of the box. We knew what we had to do – take all of the disparate, but vitally important features of SharePoint that would support a records management initiative and combine them into one unified solution. And so, over the next two years, we built the application from the ground up, squeezing everything we could out of SharePoint while providing a simplified interface that provided records managers with the tools they needed to successfully perform their jobs and end users with the simplest of interfaces that allows them to find exactly what they are looking for without needing more than a few minutes of training.

In the end, Record Center became – and still is – one of the most successful IT projects in the history of our customer. And today, with the latest version of Record Center available for both SharePoint 2013 & 2016, organizations can have an accurate picture of and can easily manage the lifecycle of their records.

brick-wall-built.jpg

We knew we had to take all of the disparate features of SharePoint and combine them into one unified solution.

We know that records management isn’t a glamorous or exciting topic, but it’s a critical component to most organizational strategies for reducing liability, ensuring discoverability, and properly classifying records to meet legal and compliance requirements. Already using SharePoint? Then why implement a separate system that you must manage and maintain – use what you already have and experience a better path forward.

Interested in learning more about Record Center?

Records Management Self-Assessment

Throughout the history of B&R we've encountered organization after organization that struggles with records management. Some organizations think they're "doing" records management, right up until the point that someone asks for a record and it can't be found—or even worse, when a record that is well past its' retention period pops up during discovery. 

We've been around the block, and we've seen it all. From organizations that are still storing records on file shares, in email, inside of filing cabinets, or even worse—putting them in boxes and shipping them off site. Many organizations cringe when someone asks for a record, or when a discovery request comes in, because it's just so much manual work to find records. 

Not having your records in a centralized location that's easily accessible and auditable wastes time. Many organizations recognize and define retention policies, but either don't enforce them, or simply can't enforce them due to the way they're storing their records. 

Over the years, we've honed in on a few key questions to assess the maturity of your organization's records management practices. Answer these questions honestly and objectively; if your answers to any of these questions concern you then it might be time to reevaluate your approach to records management. 

Record Center is your turnkey solution for enterprise-class record management. An extension of Microsoft SharePoint, Record Center arms your users and record managers with a feature-packed, intuitive solution to manage the entire life-cycle of your records. Configure, approve and search for records faster and easier than ever with Record Center.